$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft File: C352DFD797F0814103500130B1A6B6876355C3DF.mft (raw, json) Hash identifier: a4eQ3/xfY7isEBEnFxf1Oqaw4H0BdmDnzisD6ZHojjs= Subject key identifier: 08:AE:8A:37:4F:5A:D2:E4:23:2F:6C:30:F2:93:62:E1:C1:78:7A:BF Authority key identifier: C3:52:DF:D7:97:F0:81:41:03:50:01:30:B1:A6:B6:87:63:55:C3:DF Certificate issuer: /CN=C352DFD797F0814103500130B1A6B6876355C3DF Certificate serial: 2E6DDBDF6F3679F2B43022D8C46443423E5682C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 22:03:20 +0000 Manifest this update: Wed 23 Sep 2026 21:58:20 +0000 Manifest next update: Fri 25 Sep 2026 00:55:20 +0000 Files and hashes: 1: C352DFD797F0814103500130B1A6B6876355C3DF.crl (hash: AeEvwUklf0Q6wbiYit/dYLJd1hOm67Qc7PwnRtEea8A=) 2: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: zyRn7jFyehFEgsKHr+RevPoVMdyoLH00YGiqg3O4fKo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.crl rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6d:db:df:6f:36:79:f2:b4:30:22:d8:c4:64:43:42:3e:56:82:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C352DFD797F0814103500130B1A6B6876355C3DF Validity Not Before: Sep 23 21:58:20 2026 GMT Not After : Sep 25 00:55:20 2026 GMT Subject: CN=08AE8A374F5AD2E4232F6C30F29362E1C1787ABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:02:75:d6:d0:07:f0:de:6e:7f:1f:b8:ff:6e: f9:a7:be:e5:4e:12:36:10:69:de:e9:29:c3:6f:d1: f8:bb:ed:27:58:12:40:6d:dd:c2:4b:e3:4f:ef:f2: fd:26:97:58:c0:42:ad:6b:08:3f:fd:12:c6:94:3c: 3f:61:aa:4b:56:bd:d7:45:73:7d:36:c6:89:b7:ec: 1c:be:b0:b9:0b:b0:c5:dd:f1:fc:ef:40:d8:b9:36: 9d:aa:4c:08:39:a9:a7:f9:e4:54:f8:f2:06:2c:d6: 4b:3f:04:0d:d7:87:b8:e4:12:82:6e:93:16:5e:b3: 01:79:84:8d:01:38:63:e2:e0:6b:b2:7f:c5:e2:64: 19:72:49:e0:dc:d3:ea:7c:cb:95:b2:c2:5a:e5:cc: f3:f8:6a:f6:db:be:7d:d8:20:cc:6a:58:0c:22:1b: 45:ba:be:d0:03:89:9c:dd:09:fc:03:c9:d2:81:86: 1f:d4:82:c2:25:86:af:91:9e:b4:fd:7b:82:34:a2: 67:a0:fa:c7:c1:a7:40:41:44:36:4d:9a:b1:41:4d: 1a:6b:a9:14:f2:39:ab:dd:cf:91:1c:1b:a9:cc:d1: be:51:02:30:5f:41:49:8b:27:0f:97:a6:64:1b:86: 0e:1b:db:50:32:85:4d:4a:e3:57:08:dd:c7:3c:a8: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AE:8A:37:4F:5A:D2:E4:23:2F:6C:30:F2:93:62:E1:C1:78:7A:BF X509v3 Authority Key Identifier: keyid:C3:52:DF:D7:97:F0:81:41:03:50:01:30:B1:A6:B6:87:63:55:C3:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:68:c1:e3:dd:53:bf:36:09:58:20:31:2f:a2:22:b2:da:a8: 07:70:aa:d7:ce:7b:35:02:56:15:fa:12:f9:08:50:1c:2b:33: 53:ed:4f:d0:e7:4d:9e:33:b2:ac:4f:d2:79:e1:10:5e:b2:0a: 00:9c:7a:76:05:c5:b8:fe:e6:8b:13:14:0b:bb:05:83:85:f6: 6c:23:84:a9:f5:e0:72:70:82:a7:2c:05:17:bd:e4:61:7f:7a: 9d:07:77:d9:70:c9:ba:81:63:f1:40:55:6b:fd:61:75:4c:b5: 6c:2f:0d:93:c0:37:5e:5d:63:41:3b:8e:56:07:60:12:49:a0: e4:44:d6:9d:5f:cf:b7:57:bc:22:7a:c8:c6:be:59:f6:b2:2b: d9:7e:6e:40:3e:8f:fe:28:94:85:44:f7:3d:29:63:86:3c:08: 14:32:62:03:69:ea:68:4a:5b:3e:b7:e0:bc:ad:36:3f:05:d7: ec:7c:3a:aa:c4:57:6f:3a:a1:3c:42:48:b3:d7:0a:e9:a9:25: 6d:2f:c9:9d:d0:9c:96:9e:01:31:8c:0d:b5:0a:22:37:00:b3: 93:5a:21:56:a3:cf:f3:c3:0e:98:8d:ff:79:d8:03:5c:6c:b6: fc:3a:1a:8a:50:a5:90:38:a0:ba:d1:6a:46:64:ab:b0:69:5c: db:f9:59:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULm3b3282efK0MCLYxGRDQj5WgsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1MkRGRDc5N0YwODE0MTAzNTAwMTMwQjFBNkI2ODc2 MzU1QzNERjAeFw0yNjA5MjMyMTU4MjBaFw0yNjA5MjUwMDU1MjBaMDMxMTAvBgNV BAMTKDA4QUU4QTM3NEY1QUQyRTQyMzJGNkMzMEYyOTM2MkUxQzE3ODdBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXAnXW0Afw3m5/H7j/bvmnvuVO EjYQad7pKcNv0fi77SdYEkBt3cJL40/v8v0ml1jAQq1rCD/9EsaUPD9hqktWvddF c302xom37By+sLkLsMXd8fzvQNi5Np2qTAg5qaf55FT48gYs1ks/BA3Xh7jkEoJu kxZeswF5hI0BOGPi4Guyf8XiZBlySeDc0+p8y5WywlrlzPP4avbbvn3YIMxqWAwi G0W6vtADiZzdCfwDydKBhh/UgsIlhq+RnrT9e4I0omeg+sfBp0BBRDZNmrFBTRpr qRTyOavdz5EcG6nM0b5RAjBfQUmLJw+XpmQbhg4b21AyhU1K41cI3cc8qLsJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCK6KN09a0uQjL2ww8pNi4cF4er8wHwYDVR0j BBgwFoAUw1Lf15fwgUEDUAEwsaa2h2NVw98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ2N2VjMzMtNWE3Mi00YzY1LTlmZDMtNjZlZjg0NzkzOTRkLzAvQzM1MkRGRDc5 N0YwODE0MTAzNTAwMTMwQjFBNkI2ODc2MzU1QzNERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMzUyREZENzk3RjA4MTQxMDM1MDAxMzBCMUE2QjY4NzYzNTVD M0RGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvQzM1MkRGRDc5N0YwODE0MTAzNTAwMTMwQjFBNkI2 ODc2MzU1QzNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExowePdU782CVggMS+iIrLaqAdwqtfOezUC VhX6EvkIUBwrM1PtT9DnTZ4zsqxP0nnhEF6yCgCcenYFxbj+5osTFAu7BYOF9mwj hKn14HJwgqcsBRe95GF/ep0Hd9lwybqBY/FAVWv9YXVMtWwvDZPAN15dY0E7jlYH YBJJoORE1p1fz7dXvCJ6yMa+WfayK9l+bkA+j/4olIVE9z0pY4Y8CBQyYgNp6mhK Wz634LytNj8F1+x8OqrEV286oTxCSLPXCumpJW0vyZ3QnJaeATGMDbUKIjcAs5Na IVajz/PDDpiN/3nYA1xstvw6GopQpZA4oLrRakZkq7BpXNv5WeA= -----END CERTIFICATE-----Generated at Thu Sep 24 03:53:30 2026 by rpki-client